use-t3code-cli

SUSPICIOUS: The skill’s behavior mostly matches its stated T3 handover purpose, but it routes sensitive project/thread actions through a third-party personal CLI rather than an official vendor tool. There is no direct credential scraping or obvious exfiltration in the skill text, yet the external CLI trust boundary and write-capable defaults make this a medium security risk.